Security News > 2023 > May > Microsoft disarms push notification bombers with number matching in Authenticator
Microsoft is hoping to curb a growing threat to multi-factor authentication by enforcing a number-matching step for those using Microsoft Authenticator push notifications when signing into services.
In October 2022, Microsoft introduced number matching as an option, as well as other security features like location and application context, in Microsoft Authenticator.
Now, number matching is automatically being enabled for all push notifications in Authenticator.
"As relevant services deploy, users worldwide who are enabled for Authenticator push notifications will begin to see number matching in their approval requests," the vendor wrote in an Azure support note this week.
Some services will begin deploying the changes starting this week and "Users will start to see number match in approval requests. As services deploy, some may see number match while others don't. To ensure consistent behavior for all users, we highly recommend you enable number match for Authenticator push notifications in advance."
The number matching also will work in other scenarios with Authenticator, including self-service password reset, AD FS adapters, and combined MFA and SSPR registration when setting up Authenticator.